secure04.dv.fanaticsretailgroup.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:f4:75:b1:1d:b5:2d:54:19:98:bb:43:6d:99:7b:8d:96 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure04.dv.fanaticsretailgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:f4:75:b1:1d:b5:2d:54:19:98:bb:43:6d:99:7b:8d:96
Serial Number (int): 414788865631747204691061174414446255902102
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:8b:61:74:d4:f1:fc:78:a1:e3:19:39:05:83:9c:81:94:27:b3:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:01:a4:d4:da:54:a2:f5:db:82:98:b8:93:25:78:b1:6c:f5:da:e0
Fingerprint (sha256): 4e:04:a6:41:58:0f:9f:d3:48:69:86:19:6d:75:f2:40:e4:33:ef:0f:1f:85:b5:5b:7c:94:81:46:37:01:05:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate secure04.dv.fanaticsretailgroup.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure04.dv.fanaticsretailgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asiastore.fcbayern.com
boutique.letour.fr
chelseamegastore.com
dfb-fanshop.de
englandrugbystore.com
englandstore.com
europe.nflshop.com
euroshop.rydercup.com
evertondirect.evertonfc.com
f1store.formula1.com
fanatics-intl.com
fanatics.co.uk
fanatics.de
fanatics.es
fanatics.fr
kitbag.com
m.asiastore.fcbayern.com
m.boutique.letour.fr
m.chelseamegastore.com
m.dfb-fanshop.de
m.englandrugbystore.com
m.englandstore.com
m.europe.nflshop.com
m.euroshop.rydercup.com
m.evertondirect.evertonfc.com
m.f1store.formula1.com
m.kitbag.com
m.mlbshopeurope.com
m.overwatchleaguestore.com
m.shop.atleticodemadrid.com
m.shop.avfc.co.uk
m.shop.mancity.com
m.shop.psg.fr
m.softbankhawksstore.jp
m.store.manutd.com
mlbshopeurope.com
nbastore.co.nz
nbastore.com.au
nbastore.com.kh
nbastore.com.my
nbastore.com.sg
nbastore.com.vn
nbastore.eu
nbastore.jp
nbastore.la
nbastore.mn
nbastoreinternational.com
overwatchleaguestore.com
payments.asiastore.fcbayern.com
payments.boutique.letour.fr
payments.chelseamegastore.com
payments.euroshop.rydercup.com
payments.evertondirect.evertonfc.com
payments.overwatchleaguestore.com
payments.shop.europeantour.com
payments.softbankhawksstore.jp
secure04.dv.fanaticsretailgroup.com
shop.atleticodemadrid.com
shop.avfc.co.uk
shop.europeantour.com
shop.mancity.com
shop.psg.fr
softbankhawksstore.jp
store.manutd.com
theallinchallenge.co.uk
www.chelseamegastore.com
www.dfb-fanshop.de
www.englandrugbystore.com
www.englandstore.com
www.kitbag.com
www.mlbshopeurope.com
www.overwatchleaguestore.com
www.softbankhawksstore.jp
www.theallinchallenge.co.uk

Other certificates including the domain name fanaticsretailgroup.com

(limited to 100 certificates)
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
*.sites.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
secure03.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure04.dv.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure07.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com

Certificate

The complete raw certificate details for secure04.dv.fanaticsretailgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56Q++WkzT38y9qACpvdE
EpBOtEnZj3vfbERWjPjRFqS7aua0GAFZvqyuVIWtQTRepKTEh0wSfKcIIiHE0kuf
Ed2DuhZEVu14ONK71n25k4TDUCp1W3YjNnTY2Llt+CtwAZ6kyrnYwE26p9bwDmhH
j9/lVMXvIZSMX/BoV9GefS17dLX8rqWbaNwB9XMz/rTfvTe78hy9D9Z52BQnLPOX
PXmmFFdProgqLqWpjn4kkAzRkV7+PMVGLVgwroT7v+BS1hzk0M9WyMMU810pfPYd
5uPUwKCjr93l3/JGju2TflAgmtJj49zkWk3vgQKPfEWEVtOw1FLwZpvmC12ISgac
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414788865631747204691061174414446255902102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-26 16:14:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-26 16:14:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure04.dv.fanaticsretailgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29242041165050790537918132854323002077010327936100386406897700383014610244871485967561642990190447231300333367158314917903373111091461493567299293885269193818823906212284488837881810017686903426001351369209623016150297908890126564141108818215597973995578883090354142445008126022783454777275655713958417789161892784816251601153905670385060574639329735908602972592102097354517104941168605312524822020070293519026386664852208733609632382779901069555930434911123630462346168436434770233574080617145818642095707462793305740728080594208802510033202388144095796077623995682481297041641743606540993901696234803189986233851011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef8b6174d4f1fc78a1e3193905839c819427b360
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1643 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1store.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.europe.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.f1store.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mlbshopeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.avfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.shop.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlbshopeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastore.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbastoreinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.asiastore.fcbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.boutique.letour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.euroshop.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.evertondirect.evertonfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.shop.europeantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure04.dv.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.atleticodemadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.avfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.europeantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.psg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.manutd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theallinchallenge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chelseamegastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfb-fanshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englandrugbystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englandstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlbshopeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overwatchleaguestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softbankhawksstore.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theallinchallenge.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001773fb0609a00000403004730450220322044eed3515fa81c95909819268040104c8edad1da0a32c700ef5dd0a601a102210085dcd055fb21a93950e2a4bdde3cb9bc773029ca4942ac9913149f908961af61007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001773fb0608f00000403004730450221009fbf4e661ae271235f476c1f48f14f96127fa71127232c3984dadd29c25b08b4022076d18083c2ee76a91104747f03eb967830bc999a5f5bb9cabfe49b6134ad3b93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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